Billing

Create or retry Checkout with a trusted publication decision

Requires the customer credential’s authenticated actor, billing:write, live billing, and a server-signed publication assertion. The assertion must use EdDSA, issuer promotion-auth-adapter, audience promotion-account, operation checkout, and a positive lifetime of at most five minutes. Its sub and team_id must match the customer credential, and its operation_id, home_region, decision, success_url and cancel_url must exactly match the body. The region must match the receiving cell.

The decision is committed with the fresh generation before Stripe session creation. publication_failed preserves paid access without new automatic promotion credit; standard uses existing eligibility checks. Retry the same operation and body with a renewed assertion after a lost response. Existing generations retain their original payer and decision. A changed or retired operation conflicts; do not fall back to the legacy creation route on an error or an older server’s missing route.

Bodies over 4096 bytes and unknown fields are rejected. Redirects must match the regional API’s allowed billing redirect configuration.

POST

stripe

checkout-session

publication-decision

Create or retry Checkout with a trusted publication decision

curl --request POST \
  --url https://api.superserve.ai/stripe/checkout-session/publication-decision \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --header 'X-Promotion-Account-Assertion: <api-key>' \
  --data '
{
  "operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "success_url": "<string>",
  "cancel_url": "<string>"
}
'

import requests

url = "https://api.superserve.ai/stripe/checkout-session/publication-decision"

payload = {
    "operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "success_url": "<string>",
    "cancel_url": "<string>"
}
headers = {
    "X-API-Key": "<api-key>",
    "X-Promotion-Account-Assertion": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-API-Key': '<api-key>',
    'X-Promotion-Account-Assertion': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    operation_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    success_url: '<string>',
    cancel_url: '<string>'
  })
};

fetch('https://api.superserve.ai/stripe/checkout-session/publication-decision', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.superserve.ai/stripe/checkout-session/publication-decision",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'operation_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'success_url' => '<string>',
    'cancel_url' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-Key: <api-key>",
    "X-Promotion-Account-Assertion: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.superserve.ai/stripe/checkout-session/publication-decision"

	payload := strings.NewReader("{\n  \"operation_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"success_url\": \"<string>\",\n  \"cancel_url\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")
	req.Header.Add("X-Promotion-Account-Assertion", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.superserve.ai/stripe/checkout-session/publication-decision")
  .header("X-API-Key", "<api-key>")
  .header("X-Promotion-Account-Assertion", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"operation_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"success_url\": \"<string>\",\n  \"cancel_url\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.superserve.ai/stripe/checkout-session/publication-decision")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["X-Promotion-Account-Assertion"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"operation_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"success_url\": \"<string>\",\n  \"cancel_url\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "url": "<string>",
  "id": "<string>"
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

Authorizations

X-API-Key

string

header

required

X-Promotion-Account-Assertion

string

header

required

Server-only Ed25519 JWT binding the authenticated actor and team to the exact Checkout intent.

Body

application/json

operation_id

string<uuid>

required

Stable random operation locator generated before the first request.

home_region

enum<string>

required

Available options:

use,

usw

decision

enum<string>

required

Available options:

standard,

publication_failed

success_url

string<uri>

required

cancel_url

string<uri>

required

Response

Checkout session created or original session returned

url

string<uri>

required

string

Create or retry Checkout with a trusted publication decision

curl --request POST \
  --url https://api.superserve.ai/stripe/checkout-session/publication-decision \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --header 'X-Promotion-Account-Assertion: <api-key>' \
  --data '
{
  "operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "success_url": "<string>",
  "cancel_url": "<string>"
}
'

import requests

url = "https://api.superserve.ai/stripe/checkout-session/publication-decision"

payload = {
    "operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "success_url": "<string>",
    "cancel_url": "<string>"
}
headers = {
    "X-API-Key": "<api-key>",
    "X-Promotion-Account-Assertion": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-API-Key': '<api-key>',
    'X-Promotion-Account-Assertion': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    operation_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    success_url: '<string>',
    cancel_url: '<string>'
  })
};

fetch('https://api.superserve.ai/stripe/checkout-session/publication-decision', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.superserve.ai/stripe/checkout-session/publication-decision",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'operation_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'success_url' => '<string>',
    'cancel_url' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-Key: <api-key>",
    "X-Promotion-Account-Assertion: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.superserve.ai/stripe/checkout-session/publication-decision"

	payload := strings.NewReader("{\n  \"operation_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"success_url\": \"<string>\",\n  \"cancel_url\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")
	req.Header.Add("X-Promotion-Account-Assertion", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.superserve.ai/stripe/checkout-session/publication-decision")
  .header("X-API-Key", "<api-key>")
  .header("X-Promotion-Account-Assertion", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"operation_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"success_url\": \"<string>\",\n  \"cancel_url\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.superserve.ai/stripe/checkout-session/publication-decision")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["X-Promotion-Account-Assertion"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"operation_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"success_url\": \"<string>\",\n  \"cancel_url\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "url": "<string>",
  "id": "<string>"
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>"
  }
}

Sandboxes

Snapshots

Exec

Files

Snapshots

Templates

Secrets

Billing

Team Management

Activity

Create or retry Checkout with a trusted publication decision

Authorizations

Body

Response